ISC2 Exam ISSEP Topic 1 Question 69 Discussion

Corrective controls are used after a security breach. After security has been breached, corrective

controls are intended to limit the extent of

any damage caused by the incident, e.g. by recovering the organization to normal working status as

efficiently as possible.

Answer option D is incorrect. Before the event, preventive controls are intended to prevent an

incident from occurring, e.g. by locking out

unauthorized intruders.

Answer option C is incorrect. During the event, detective controls are intended to identify and

characterize an incident in progress, e.g. by

sounding the intruder alarm and alerting the security guards or the police.

Answer option B is incorrect. Safeguards are those controls that provide some amount of protection

to an asset.